1501 results found

1. Invalidate local encryption keys on new biometric enrollment (Android / iOS)

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable to device PIN compromise followed by rogue biometric enrollment.

   2. Technical Analysis & Current Gap:
      Both Android and iOS/iPadOS provide OS-level APIs designed to mitigate this exact threat by invalidating cryptographic keys stored in KeyStore / Secure Enclave when the biometric set changes:

   Android: setInvalidatedByBiometricEnrollment(true) in KeyGenParameterSpec.Builder. When enabled, adding a new fingerprint throws a KeyPermanentlyInvalidatedException upon use.

   iOS / iPadOS: kSecAccessControlBiometricCurrentSet flag in Keychain services. The key becomes invalid if evaluatedPolicyDomainState changes.

   Our testing confirmed that Proton Pass currently allows access even after a new fingerprint is enrolled. This indicates that the app either explicitly sets setInvalidatedByBiometricEnrollment(false) (or equivalent) or relies on biometric prompt evaluation without binding decryption directly to an invalidated key.

   1. Proposed Solution: We request implementing an option to bind local app authentication directly to the current biometric set:

   Enforce Key Invalidation: When a new biometric is enrolled, the local key used for app unlock/decryption should be automatically invalidated by the OS.

   Fallback to Master Password: When key invalidation is detected (KeyPermanentlyInvalidatedException or domain state change), force the user to re-authenticate with their Master Password to re-generate the local biometric unlock key.

   Optional User Toggle (User Control): To balance security and convenience, provide a toggle setting in the app:

   Option: "Require Master Password if biometrics change" (Default: ON or Optional for high-security users).

   1. Secondary Benefits (Security Awareness & Incident Response): Requiring a Master Password upon key invalidation also provides a critical early-warning mechanism for users:

   Detection of Rogue Biometrics: If a user is suddenly prompted for their Master Password despite not adding a fingerprint themselves, they are immediately alerted to potential unauthorized access to their device settings.

   Prompting Incident Response: This notification allows users to audit their registered biometrics, remove unauthorized fingerprints, and recognize that their device PIN/passcode has likely been compromised—prompting them to change their PIN immediately.

   Summary:
   When a user adds a new fingerprint/biometric credential to their device, Proton Pass currently allows access using the newly added biometric. To protect vault contents from device PIN compromise and rogue biometric enrollment, we propose adding an option that automatically invalidates local unlock keys when the device's biometric set changes, forcing a Master Password re-authentication.

   1. Background & Threat Model:
      Currently, if an attacker obtains a user's device PIN/passcode and registers their own fingerprint or face in the OS settings, they can seamlessly unlock the Proton Pass app using that newly added biometric. This leaves stored credentials and Passkeys vulnerable… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Securely get a password from a friend (reverse share feature)

   Feature that allows people to securely share secrets with a Proton pass user.

   Right now, if I (as a Proton Pass user) want to send a secret to a friend, I can use the share feature. But if my friend (who isn't a Proton Pass user) wants to send a secret to me, there’s no simple way to do it.

   A nice feature would be the ability to generate a secure link that I could send to them, where they can paste their secret. That secret would then appear directly in my vault.

   77 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Re: Import passwords into Proton Pass---Could you please include Norton Password as an option?

   Re: Import passwords into Proton Pass---Could you please include Norton Password as an option?

   56 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Copy secret reference for Pass CLI

   Currently we cannot get pass:// reference from anywhere. I want to copy secret reference from browser extension and desktop application.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Show additional information: Password/Passphrase by chosen real character length e.g. (30)

   Problem:
   some accounts have a character limitation e.g. 32 characters.
   - If you create a new password with 30 characters, all fine.
   - If you create a new password with 40 characters, it will not be accepted. Error. You have to reduce and/or count manually each character.

   Solution:
   easy, simple character length information e.g. (30)
   Show additional information: Password/Passphrase by chosen real character length e.g. (30)

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Requesting email suggestions, username suggestions, and description features for Proton Pass.

   Hi there, I am recently starting to use Proton Pass & its UI and features, which are much more user-friendly, but I need some features that I believe enhance the user experience.

   1. Email Suggestion: Email suggestion helps to suggest an email from my previously saved email, which is/are already used on the password manager. So, I won't need to enter the same mail fully again. Just type the few mail portions or words, and suggestions will come across as a suggestion menu under the email input field.

   2. Username Suggestions: This feature is actually useful when I sign up on a website where a username is required. Sometimes, there is often confusion about what a username should be, and many people don't want to use the same username on different platforms, so they want a unique username. So, this auto username feature helps to generate unique or memorable usernames by clicking the auto username icon or button next to the username input field.

   3. Description Feature: It's an optional feature but also useful for some users. It helps users to write short descriptions about passwords or other credentials without using the notes field.

   Hi there, I am recently starting to use Proton Pass & its UI and features, which are much more user-friendly, but I need some features that I believe enhance the user experience.

   1. Email Suggestion: Email suggestion helps to suggest an email from my previously saved email, which is/are already used on the password manager. So, I won't need to enter the same mail fully again. Just type the few mail portions or words, and suggestions will come across as a suggestion menu under the email input field.

   2. Username Suggestions: This feature is actually useful when I sign up on a… more

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Let Us Fix the Icons You Can't Fetch: Allow Custom Favicon Uploads

   Dear Proton Development Team,

   I need to talk about the generic favicon problem in Proton Pass. I find it an issue & very frustrating when your system can’t fetch a simple favicon, and just defaults to the same generic human silhouette for every un-fetched entry. The default icon [A light coloured, Proton purple human silhouette on a dark circular background]

   Case in point: I tried to save my n8n.io login. Multiple URLs, no favicon found. What did I get? That same human silhouette favicon....

   Not a letter, not a logo....just a silhouette. It’s the same for Similar.ai, Meta/Facebook/Ollama, Fedex & all of Proton's sub domains! Due to so many auto-fetch fails, I/we are left with zero visual distinction, between completely different services.

   This completely breaks the user experience for me & Im sure many others. To be fair I & so many others don’t identify our bank accounts 🏦, our automation tools, or our email accounts 📧 by looking at the same non distinctive silhouette. I recognize logos. The silhouette just creates so much visual noise. It makes my vault feel impersonal and hard, slow/clunky to navigate.

   Here’s what needs to happen:

   1. Fix or Replace || Auto-Fetch Params

   -Support more file types and icon locations (SVG, PNG, high-res).

   -Actually work for major platforms. If it can’t, give us a real alternative.

   1. Let Us Upload Our Own Icons || This is Essential

   -If the system fails, I should be able to upload my own icon in under 10 seconds.

   -Support .png, .jpg, .svg, .gif, etc.

   -Allow uploads from my device or via image URL.

   -Include a simple crop/resize tool in-app.

   1. If Development is Blocked || Consider an AI-Assisted Solution

   -If the frontend/backend workload is too high for manual uploads right now, consider implementing a lightweight AI fetch layer that:

   -Caches and indexes favicons from a trusted source

   -Generates fallback icons based on site branding colors and initials (better than a silhouette)

   -Runs client-side or via a privacy-respecting proxy

   --> I am passionate about fixing this problem & would welcome the chance to contribute directly to solving this issue. With development experience I would be genuinely humbled to have an opportunity to work with the Proton Dev Team, if I could help implement one of my expertly crafted autonomous ai workflows' w/ custom fit parameters!

   Honestly, this isn’t just a cosmetic nice-to-have element. This is a core usability issue. A password manager is a visual tool. When every unrecognizable login looks like the same default silhouette, the product feels incomplete.

   Please give us a way to make our vaults actually usable at a glance. Let us replace the silhouettes with real logos.

   Signed,
   A truly passionate ProtonPass user & friend who’s tired of identifying everything by a generic bland icon.

   Dear Proton Development Team,

   I need to talk about the generic favicon problem in Proton Pass. I find it an issue & very frustrating when your system can’t fetch a simple favicon, and just defaults to the same generic human silhouette for every un-fetched entry. The default icon [A light coloured, Proton purple human silhouette on a dark circular background]

   Case in point: I tried to save my n8n.io login. Multiple URLs, no favicon found. What did I get? That same human silhouette favicon....

   Not a letter, not a logo....just a silhouette. It’s the same for Similar.ai, Meta/Facebook/Ollama, Fedex &… more

   19 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Feature request: Display all items under a vault when the vault is clicked

   Feature request: The new folders/subfolder features launched, this is truly great! However, when I click on the vault, I dont see any items anymore, I have to click on the folders to see them. I was expecting the vault to show "All items" I think this would be a good QOL improvement (Basic usage really)

   Thanks!

   4 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Proton Pass browser extension should retain settings

   Extension settings should be stored server side, and when signed-in again, they should be automatically applied.

   7 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New feature  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Folders instead of vaults

    The existing "Vaults" Feature is not good in my opinion. Its little bit confusing, so if this feature should be handled as a folder, why not name it "Folder", and pls let us create unlimited folders, not only 50. I think about to switch to Proton but this holding me back, i have NordPass where i can create unlimited Folders for better organisation... considder this update pls.

    47 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Auto-lock when system lock

    Hi Team,

    Suggesting a new timeout settings for the proton pass browser extension. Suggesting we add a new option that will stay the vault open and will lock once the system is locked or gets shutdown.

    638 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    32 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Proton Pass App on Mac Needs a Dark Icon Style

    I have my Icon & Widget Style in my mac settings (under Appearance) set to Dark. My Dock has all dark apps in it, except for Proton Pass - it remains light.

    I would like them all to match, and I use an OLED display so a light app in my dock is harder on the screen and increases my risk of burn-in.

    Please update the Mac app icon to match the iOS app when dark icons are configured.

    Thank you!

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Paperclip icon in the item list

    In Bitwarden, if I attach a file to a login item, a paperclip icon appears in the item list to let me know there is an attachment; this doesn't exist in Proton Pass, so if I can't remember where I attached a document, I have to open each item to check.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Provide an accessibility statement

    I would like Proton to provide an accessibility statement that clearly outlines what to expect in terms of accessibility for people with disabilities, based on international standards such as the Web Content Accessibility Guidelines (WCAG) or EN 301 549.

    This would also make it easier for users with disabilities to understand if they can safely switch to and rely on this product.

    This would make it easier for me to use and recommend the product in organisations with accessibility requirements, like the public sector.

    5 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Change suffix of the alias

    currently : I want to generate an alias. I click on "create an... + alias". Proton let me set a prefix. but peoton impose a suffix. if I dont want this suffix, I have to abandon + restart the procedure from the begining.
    proposal : to add a button "change alias". => proton would generate a new suffix randomly.

    6 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Fake Vault + Password - if you're forced to give it

    Use a special password to display a fake vault if you've been forced to give your password

    92 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Bitcoin Fraud Investigation Services — SAGITTARIUS CYPHER CYBER INTELLIGENCE

    My experience with SAGITTARIUS CYPHER CYBER INTELLIGENCE has shown me the importance of professional guidance, clear communication, and evidence-based investigation when dealing with cryptocurrency scams and online financial fraud.
    Their focus on blockchain transaction analysis, digital evidence, and investigative support provides a helpful starting point for understanding suspicious transactions and exploring possible next steps.
    What stands out is the importance of transparency, professionalism, and realistic expectations throughout the investigative process.
    I would encourage anyone affected by cryptocurrency fraud to preserve their evidence, report the incident to the appropriate authorities, and carefully assess their options before engaging any recovery service.
    SAGITTARIUS CYPHER CYBER INTELLIGENCE
    Committed to Every Case. Focused on Evidence. Dedicated to Professional Service.
    ✈️ Telegram: @sagittariuscyphercyber

    My experience with SAGITTARIUS CYPHER CYBER INTELLIGENCE has shown me the importance of professional guidance, clear communication, and evidence-based investigation when dealing with cryptocurrency scams and online financial fraud.
    Their focus on blockchain transaction analysis, digital evidence, and investigative support provides a helpful starting point for understanding suspicious transactions and exploring possible next steps.
    What stands out is the importance of transparency, professionalism, and realistic expectations throughout the investigative process.
    I would encourage anyone affected by cryptocurrency fraud to preserve their evidence, report the incident to the appropriate authorities, and carefully assess their options before engaging any recovery service.
    SAGITTARIUS… more

    2 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Force Autofill services

    There are problems autofilling with browsers and store apps (i.e. Brave & Firefox, and stores Aurora and F-droid. Add "Accessibility Autofill Service" and a "Manual Quick Settings Autofill Tile" to the Android app so it can force This paste passwords into sideloaded/Aurora Store apps when the standard Android autofill framework blocks it. Bitwarden already does this seamlessly. Essential for us who are de-googled.

    7 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Facilitate importing password's records from Synergy "C2 Password" to Proton Pass

    Synergy "C2 Password" is a Password manager that will be deprecated.
    Importing all records to Proton is a real pain.

    Consider making it easier with a step-by-step process to importing the data, including mapping the columns from the CSV exported from "C2 Password" to Proton Pass.

    3 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Add Proton Pass to the options when right clicking in browser

    Right now, if Photon Pass doesn't show up in a particular password field, the only way to log in is to manually open the app or extension and copy and paste in.

    In contrast, 1pasword lets you right click in the password box and select 1password from the options, which then allows you to access your login.

    This is much less hassle than doing the entire thing manually.

    4 votes

    Vote Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New feature  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating